Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer (raw, json)
Hash identifier: hkrRp1UFJ+VEgafTt0eTzUWv3jYJQppK9S31VlgDVYY=
Subject key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E477A82B7B1BB5770026E7B67109E39C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 16 Mar 2024 13:36:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 57027
IP: 80.75.213.0/24
IP: 2a09:2b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:47:7a:82:b7:b1:bb:57:70:02:6e:7b:67:10:9e:39:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 16 13:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65a665b90069bd71850602e7400c529793269e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:48:e1:49:28:65:e5:16:38:a4:bc:be:07:
cf:a7:a6:dd:a5:54:3c:a9:2b:82:50:b9:b5:d8:3f:
26:3c:00:ff:6f:0d:39:9e:7f:48:e9:3d:45:33:0a:
ec:f7:79:fa:0c:7c:34:e2:89:c3:25:c7:ed:9e:72:
37:0a:b0:1b:44:29:7e:2f:9f:bb:1c:65:93:84:ec:
2b:cd:94:5b:43:be:a5:22:22:9d:15:8c:06:3b:f2:
ee:f8:4e:2e:22:e7:02:58:37:f6:1e:fa:40:5c:80:
4d:bb:e1:ea:52:9d:89:2c:7e:ba:13:53:84:46:06:
38:ce:d2:34:79:1a:f0:8a:32:e9:21:c1:83:0b:d5:
1c:bd:1d:02:7b:b7:bc:e0:8c:e9:6c:df:0d:11:be:
bf:64:07:72:4a:98:fe:f7:35:bc:f6:c6:98:27:9e:
ed:a7:e4:b7:ba:ce:18:ce:2e:30:77:9c:18:46:bd:
e5:3e:52:85:0d:27:c7:c5:4d:d8:9f:c0:4f:14:e7:
70:54:5e:33:50:3f:ef:96:2c:94:64:63:70:57:fd:
3f:9c:de:84:54:7c:e3:46:19:c4:44:f4:dd:4d:8b:
97:a9:4d:a7:a3:69:91:8b:82:b0:d6:cd:22:2e:28:
ff:c3:c2:2f:4b:fc:02:c4:47:ed:c8:2b:29:d0:f2:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
IPv6:
2a09:2b80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57027
Signature Algorithm: sha256WithRSAEncryption
a6:36:e1:55:53:51:4b:42:cb:2f:18:6f:11:59:0f:ca:d0:57:
55:e0:b7:07:68:f1:9c:b6:52:e0:4b:e4:f0:73:3b:21:4d:6d:
b0:8c:94:ed:e8:fa:40:da:c5:4b:c3:af:d9:5e:70:ed:b1:4e:
f3:fd:18:c0:5c:ff:4d:35:1e:34:8d:03:23:86:22:31:6a:5a:
eb:15:c4:5d:21:2a:f4:53:53:02:cc:70:91:a8:ff:4c:f3:36:
35:be:5a:2c:d0:01:93:58:3d:4c:e5:39:cf:80:db:18:1c:8e:
db:a0:83:29:02:c7:66:6b:e9:87:6d:cb:9a:58:5c:3d:37:a2:
30:70:5f:39:cf:3d:60:25:02:68:e8:ee:89:1b:fe:d3:a2:d9:
e7:5f:e2:e9:22:58:21:ef:c9:f0:3d:29:58:57:d6:99:dd:ab:
53:d0:c5:e3:9d:a7:c7:53:8e:28:f9:65:0d:1d:1a:6c:0e:a2:
d3:55:ef:f0:45:ef:99:36:f1:6f:57:17:43:60:d6:4e:ce:1e:
00:7f:64:33:d6:f0:0c:6f:7b:ab:90:05:74:61:83:2c:e1:d8:
7c:61:1c:6e:99:08:4b:cc:cf:1f:f0:3b:39:72:e1:99:4f:ce:
86:1f:30:12:cf:3e:a6:1a:f0:36:ff:f2:31:e2:12:8e:e3:9a:
49:06:e4:6e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAY5HeoK3sbtXcAJue2cQnjnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzE2MTMzNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWE2NjViOTAwNjliZDcxODUwNjAyZTc0MDBjNTI5NzkzMjY5ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqZI4UkoZeUWOKS8vgfPp6bdpVQ8
qSuCULm12D8mPAD/bw05nn9I6T1FMwrs93n6DHw04onDJcftnnI3CrAbRCl+L5+7
HGWThOwrzZRbQ76lIiKdFYwGO/Lu+E4uIucCWDf2HvpAXIBNu+HqUp2JLH66E1OE
RgY4ztI0eRrwijLpIcGDC9UcvR0Ce7e84IzpbN8NEb6/ZAdySpj+9zW89saYJ57t
p+S3us4Yzi4wd5wYRr3lPlKFDSfHxU3Yn8BPFOdwVF4zUD/vliyUZGNwV/0/nN6E
VHzjRhnERPTdTYuXqU2no2mRi4Kw1s0iLij/w8IvS/wCxEftyCsp0PJHhQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGWmZbkAab1xhQYC50AMUpeTJp45MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2U2ZDg4
MC0zOTAzLTRhMTEtYmEyNy1jOTQ1N2VjODExNTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZTZkODgw
LTM5MDMtNGExMS1iYTI3LWM5NDU3ZWM4MTE1MS8xL1phWmx1UUJwdlhHRkJnTG5R
QXhTbDVNbW5qay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUEvVMA0EAgACMAcDBQMqCSuAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDewzANBgkqhkiG9w0BAQsFAAOCAQEApjbhVVNRS0LL
LxhvEVkPytBXVeC3B2jxnLZS4Evk8HM7IU1tsIyU7ej6QNrFS8Ov2V5w7bFO8/0Y
wFz/TTUeNI0DI4YiMWpa6xXEXSEq9FNTAsxwkaj/TPM2Nb5aLNABk1g9TOU5z4Db
GByO26CDKQLHZmvph23LmlhcPTeiMHBfOc89YCUCaOjuiRv+06LZ51/i6SJYIe/J
8D0pWFfWmd2rU9DF452nx1OOKPllDR0abA6i01Xv8EXvmTbxb1cXQ2DWTs4eAH9k
M9bwDG97q5AFdGGDLOHYfGEcbpkIS8zPH/A7OXLhmU/Ohh8wEs8+phrwNv/yMeIS
juOaSQbkbg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:34:02 2024 by rpki-client on console-fra.rpki-client.org